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Large  scale  terrorist  acts  and  natural  disasters  in  the  last  ten  years  have 
prompted  aid  responses  from  many  different  federal,  state,  and  local  government 
agencies  as  well  as  non-government  and  private  volunteer  organizations  and 
corporations.  Each  responding  entity  needs  information  to  carry  out  its  support  functions 
and,  in  turn,  will  have  information  to  share  with  other  entities  involved  in  the  incident. 
U.S.  military  organizations  providing  support  must  proactively  identify  and  implement 
ways  to  collaborate  and  share  information  with  other  domestic  emergency  response 
partners,  including  the  public,  while  protecting  and  defending  military  networks. 

In  order  to  do  this  prior  to  an  incident,  common  points  of  coordination  must  be 
defined  and  the  terms  and  conditions  for  establishing  data  sharing  relationships  must  be 
established.  This  must  occur  with  the  entities  most  likely  to  respond  to  large-scale 
incidents.  Policies  for  forming  ad-hoc  relationships  must  be  developed  and 
communicated  so  other  entities  can  prepare  to  participate  more  collaboratively. 

Strengthening  relationships  in  this  manner  will  promote  an  informed  response  at 
critical  times  when  lives  hang  in  the  balance. 


DOD  INFORMATION  SHARING  WITH  DOMESTIC  EMERGENCY  PARTNERS 

FOR  DSCA  MISSIONS 

Pre-established  relationships  and  mechanisms  for  information  sharing  must  be 
established  prior  to  disasters  and  periodically  reviewed  and  maintained  for  use  during 
DOD  homeland  defense  and  disaster  relief  missions  to  assure  a  fully  coordinated 
response  by  facilitating  the  exchange  of  appropriate  information  in  a  timely  manner  with 
DOD  partner  organizations.  At  all  levels,  the  DOD  must  proactively  establish  and 
maintain  these  relationships  in  order  to  enhance  informed  decision  making  and 
performance  of  domestic  operations. 

Background 

The  Department  of  Defense  (DOD)  provides  support  to  civilian  authorities  after 
natural  disasters  and  when  the  security  of  the  U.S.  requires  augmentation  by  the 
military  forces  in  order  to  save  life  and  limb  and  to  protect  critical  infrastructure.1  In  all 
cases,  and  in  accordance  with  the  U.S.  Constitution,  the  military  assistance  provided  is 
in  support  of  civil  authorities.2 

This  support  is  provided  to  civilian  authorities  in  accordance  with  Homeland 
Security  Presidential  Directive  53  which  establishes  the  Department  of  Homeland 
Security’s  (DHS)  National  Incident  Management  System  (NIMS).  NIMS  is  a  key  part  of 
the  National  Response  Framework  and  “[establishes  a  systematic  approach  for 
managing  incidents  nationwide.”4  It  is  coordinated  with  the  National  Strategy  for 
Homeland  Security  and  Response  Partner  Guides.  These  guides  define  “key  roles  and 
actions  for  local,  tribal,5  State,  federal,  and  private-sector  response  partners.”6 

Support  is  provided  in  a  scalable  manner,  although  rules  governing  assistance 
requests  vary  from  state  to  state.  Small  responses  usually  involve  requests  elevated 


from  county  (or  equivalent)  emergency  management  coordinators  to  an  agency 
representing  the  state’s  governor.  The  governor  may  then  provide  National  Guard 
assistance  to  work  alongside  other  agencies  who  are  either  responding  at  the  direction 
of  the  governor  or  via  separate  mutual  aid  agreements.7  National  Guard  assistance  is 
usually  performed  in  State  Active  Duty  status,  funded  directly  by  that  state’s 
government,  or  federally  funded  in  Title  32  status.8  If  the  incident  is  declared  a  federal 
disaster,  the  federal  government  will  reimburse  at  least  a  portion  of  state  funds 
expended  for  this  purpose.9 

A  typical  National  Guard  response  might  include  command  and  control,  aviation, 
engineer,  medical,  communications,  transportation,  and  logistics  support  as  well  as 
trained  and  disciplined  manpower  for  security  and  presence  patrols.  These  missions 
exemplify  the  concept  of  ‘dual-use;’  the  application  of  the  military’s  war-fighting  training 
and  equipment  for  a  military  domestic  response.10 

If  the  scope  of  the  disaster  surpasses  a  state’s  ability  to  respond  in  this  manner, 
Emergency  Management  Assistance  Compact  (EMAC)  agreements  may  be  executed  to 
provide  interstate  mutual  aid  of  civilian  and  military  capabilities.  The  agreements  define 
the  terms  and  conditions  of  support,  liability,  and  fund  reimbursement.11 

An  even  larger  disaster,  one  that  exceeds  the  capacity  of  local  and  regional 
assets  or  requires  special  capabilities,  may  involve  a  federal  response.  This  response  is 
typically  made  under  the  provisions  of  the  Stafford  Act,12  which  allows  the  President  to 
direct  the  use  of  DOD  resources  to  perform  emergency  work  “which  is  essential  for  the 
preservation  of  life  and  property.”13  At  this  point,  United  States  Northern  Command 
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(NORTHCOM)  will  involve  active  duty  and  reserve  forces  in  a  Title  10  status,  provided 
in  a  supporting  role  to  civilian  authorities  as  well.14 

Examples  of  Defense  Support  to  Civilian  Authorities  (DSCA)15  missions  for  relief 
following  natural  disasters  range  from  requests  for  National  Guard  assistance  at  the 
local,  county,  tribal  and  state  levels  for  tornados,  winter  storms,  and  floods  to  full  scale, 
Title  10  and  32  responses  for  catastrophic  events.  Hurricane  Katrina,  which  dramatically 
impacted  the  Gulf  Coast  in  2005,  is  an  example  of  such  a  catastrophic  event.  The  state 
and  federal  response  to  Katrina  included  approximately  72,000  military  personnel,16  and 
was  the  largest  DSCA  response  in  U.S.  history.17 

Responses  requiring  personnel  and  equipment  in  numbers  comparable  to  the 
Katrina  response  could  also  be  required  in  homeland  defense  situations.  These  events 
involve  a  manmade  or  natural  threat  or  attack  to  the  United  States,  such  as  those 
occurring  in  the  aftermath  of  the  September  1 1 , 2001  terrorist  attacks  or  a  large, 
widespread  Chemical,  Biological,  Radiological  or  Nuclear  (CBRN)  incident.18  Together, 
homeland  defense,  natural  disasters,  and  other  “equivalent  emergencies  that  endanger 
life  and  property  or  disrupt  the  usual  process  of  government”  are  termed  domestic 
emergencies.19 

In  all  cases,  disaster  response  is  comprised  of  activities  by  numerous 
government,  corporate,  charitable,  and  private  organizations  at  all  levels. 

“Citizens  are  not  well  served  if  disaster  response  is  not  based  on 
the  joint,  interagency,  inter-governmental  and  multi-national  (JIIM) 
partnership.... It  is  wasteful  and  counterproductive  not  to  engage  early  and 
regularly  with  civilian  and  military  partners  who,  acting  synchronously, 
provide  valuable  mutual  assistance  to  one  another.”20 
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Information  Sharing 

One  large  part  of  ‘acting  synchronously’  during  domestic  emergencies  is  the 
exchange  of  electronic  information  between  the  many  entities  responding  to  the  event. 
Vice  Chairman  of  the  Joint  Chiefs  of  Staff,  General  James  Cartwright,  in  speaking  of  the 
military’s  capabilities  to  share  information  with  partner  agencies,  reinforced  the 
similarities  between  current  offensive  operations  in  Afghanistan  and  Iraq  and  DSCA 
missions.  In  theater  “...we  fight  interagency  and  coalition,”21  he  said,  emphasizing  the 
close  relationships  between  U.S.  military  forces  and  other  partners.  Similar  relationships 
hold  true  for  DSCA  missions.22 

Flexible,  open  communication  systems  and  widespread  sharing  of  information  is 
contrary  to  most  actions  required  to  ensure  the  integrity  and  security  of  information 
systems.  DOD  goes  to  great  efforts  to  protect  and  defend  its  networks  and  data  from 
intrusion,  attack,  and  tampering.  Policies  exist  to  govern  accessing,  reception,  sharing 
and  transmitting  files  within  and  outside  the  DOD  network  domain.  DOD  elements  must 
proactively  engage  with  partner  agencies  to  define  the  terms  and  conditions  under 
which  information  sharing  will  occur  so  that  these  details  and  technologies  will  not  have 
to  be  negotiated  in  the  midst  of  a  domestic  emergency. 

Much  of  the  criticism  related  to  the  federal  response  to  Hurricane  Katrina  related 
to  “significant  organization  and  coordination  problems”  and  lapses  in  communications 
and  situational  awareness.23  Failure  to  plan  and  conduct  proper  coordination  for  future 
events  will  continue  to  contribute  to  unacceptable  delays  and  deny  critical  planning 
information  from  those  charged  with  making  decisions  and  saving  lives. 
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This  coordination  may  include  guidelines  for  permissible  file  formats,  hardware 
and  software  security  settings,  definitions  of  document  designations,  and  instructions  for 
handling  and  disclosing  information  to  others.  Some  commonly  encountered  types  of 
information  requiring  designations  include:  controlled  unclassified  information  (CUI)24 
such  as  sensitive  information,25  operational  and  tactical  information,  and  Law 
Enforcement  Sensitive  (LES)  information;  personally  identifiable  information  (Pll); 
Protected  Critical  Infrastructure  Information  (PCII),26  and  information  that  may  be  subject 
to  protection  under  the  Health  Insurance  Portability  and  Accountability  Act  (HIPAA).27 
This  coordination  should  also  cover  the  designation  and  handling  of  information  labeled 
‘For  Official  Use  Only  (FOUO)’  under  the  requirements  of  the  Freedom  of  Information 
Act  (FOIA).28 

Delineating  exactly  how  these  information  exchanges  take  place  during  DSCA 
response  situations  demand  a  basic  mission  analysis:  who,  what,  why,  when,  where, 
and  how,  by  domestic  operations  planners  in  conjunction  with  points  of  contact  at 
partner  agencies.29  Once  these  questions  are  resolved  for  mission  planners,  then  a 
framework  for  coordination  can  be  established  and  executed  to  ensure  timely  and 
secure  information  flow  with  domestic  emergency  partners  during  DSCA  missions. 

•  Who  are  likely  partners  that  need  or  have  relevant  information? 

•  What  types  of  critical  information  are  expected  to  be  shared  with  others? 

•  Why  is  the  information  necessary? 

•  When  will  the  information  be  needed? 

•  Where  will  the  information  be  needed? 
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•  How  will  the  information  be  coordinated,  transmitted,  received  and  used, 
and  how  will  the  integrity  of  the  information  be  maintained? 

Who.  Who  are  likely  partners  that  need  or  have  relevant  information? 

Information  may  be  sent  and  received  by  military  forces  supporting  civilian  authorities 
during  domestic  emergencies,  to  and  from  many  different  and  varied  entities  outside  the 
DOD  network  domain.30  These  entities  may  include  other  government  organizations 
(OGO),  foreign  government  or  military  organizations,  non-governmental  organizations 
(NGO),  private  volunteer  organizations  (PVO),  corporate  partners,  and  the  public. 

Some  of  these  potential  partners  may  seem  unlikely  to  traditional  emergency 
response  planners.  One  usually  associates  the  U.S.  military  with  helping  other  countries 
during  natural  disasters,  not  the  reciprocal.  In  the  aftermath  of  Hurricane  Katrina; 
however,  the  U.S.  did  receive  assistance  from  the  governments  and  militaries  of 
Mexico31  and  Canada.32  Canada  has  provided  assistance  to  the  U.S.  before,  and  a 
Strategic  Operations  Information  Sharing  Plan  of  Action  exists  between  the  two 
nations.33  This  event;  however,  set  a  precedent  for  Mexican  assistance  and  reinforces 
the  requirement  for  multi-national  cooperation. 

Another  group  of  seemingly  unlikely  disaster  relief  partners  include  corporations. 
Walmart  is  the  world’s  number  one  retailer,  with  over  2.1  million  employees  and  over 
8,300  stores.34  According  to  Brian  Koon,  Director  of  Emergency  Management  for 
Walmart,  the  corporation  set  a  new  precedent  for  private  sector  emergency 
management  during  the  aftermath  of  Hurricane  Katrina.  Katrina  damaged  over  120 
Walmart  stores,  but  they  mobilized  their  corporate  logistics  system  to  quickly  set  up 
temporary  stores  in  parking  lots  of  their  damaged  or  destroyed  properties.  They 
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assembled  nearly  2,500  truckloads  of  merchandise  to  be  sold  or  donated  for  survival 
and  recovery  efforts.35 

Walmart  realized  through  this  effort  that  better  coordination  with  other  entities 
and  officials  would  enable  a  larger  percentage  of  the  post-disaster  population  to  be 
served  better.  An  example  of  wasted  resources  cited  by  Koon  relates  a  water 
distribution  point  set  up  by  emergency  management  facilities  in  the  same  parking  lot  as 
a  temporary  store,  which  also  had  supplies  of  water.  Meanwhile,  there  were  other  areas 
in  the  same  county  that  were  more  than  ten  miles  away  from  any  water  distribution 
points.  The  point  Koon  makes  is  that  Walmart  and  emergency  management  officials 
should  share  data  about  where  they  were  distributing  supplies  so  that  the  duplication  of 
effort  could  be  reduced  and  underserved  areas  better  accommodated.36 

Townsend  and  Moss,  in  their  analysis  of  telecommunications  in  disasters,  quote 
researchers  of  Japan’s  1996  Kobe  earthquake: 

“The  basic  lesson  from  Kobe  is  that  the  usual  approach  of  disaster 
communications,  traditionally  based  on  military-style  public  safety 
agencies  that  are  operating  in  a  topdown  manner  and  share  information 
with  “civilians”  only  on  a  “need-to-know”  basis,  should  be  replaced. 

Instead,  we  should  set  up  an  open-access  emergency  system  -  open  to 
inputs  from  a  wide  variety  of  public  and  private  participants  and  with  open 
to  access  to  that  information.”37 

While  the  Kobe  article  focuses  specifically  on  voice  telecommunications, 
Townsend  and  Moss’  research  also  analyzed  telecommunications  systems  and  their 
uses  during  other  significant  events.  They  examined  the  2004  Indian  Ocean  Tsunami, 
the  September  1 1 , 2001  terrorist  attacks  on  the  World  T rade  Center,  and  the  1 999 
NATO  bombing  of  Belgrade.38  During  this  time,  the  use  of  cellular  telecommunications 
for  voice  and  data  services  expanded  greatly.  They  found  that: 
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“Three  decades  of  social  science  research  in  disaster  recovery  has 
produced  a  compelling  body  of  evidence  on  the  important  response  role  of 
private  firms,  NGOs,  and  social  networks.39  International  aid  agencies  are 
increasingly  orienting  disaster  preparedness  and  prevention  strategies 
around  these  institutions.40  Particularly  in  very  large  or  prolonged  disasters 
that  exhaust  official  capabilities,  NGOs  and  citizen  volunteers  are 
crucial. 41 

The  mention  of  social  networks  in  this  2005  effort  is  very  interesting.  As 
technologies  continue  to  develop,  social  networking  is  playing  an  even  larger  role  in 
emergency  management.  Social  networking  and  interested  volunteer  communities 
around  the  world  played  a  very  important  role  during  the  2010  earthquake  in  Haiti,  and 
the  201 1  earthquake  in  Christchurch,  New  Zealand.42 

Many  different  entities  have  the  capabilities  and  will  to  assist  during  domestic 
emergencies.  It  is  difficult  to  anticipate  which  partners  will  respond  to  an  emergency, 
regardless  of  the  size  of  the  event.  As  the  next  section  shows,  common  points  of 
coordination  must  be  determined  to  make  those  initial  meetings  smoother. 

What  and  Why.  What  types  of  critical  information  are  expected  to  be  shared 
with  others  and  why  is  the  information  necessary?  Electronic  information  types  likely  to 
be  shared  during  domestic  response  events  might  typically  include  common  word 
processing,  spreadsheet,  presentation  files,  graphics,  and  geo-tagged43  information 
used  to  create  common  operating  pictures. 

Any  accurate  or  verifiable  information  that  will  aid  responders,  decision  makers, 
or  their  operations  and  logistics  planners  better  serve  those  affected  by  a  catastrophe 
falls  into  this  realm.  This  may  include  orders,  situation  update  reports,  logistics 
requirements,  pictures,  videos,  briefings,  and  rosters  of  personnel,  equipment  and 
supplies.  Important  information  may  be  accessed  though:  email  text  and  attached  data 
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files;  files  made  available  on  web-based  file  sharing  portals;  partner  incident 
management  systems;  partner  mapping  solutions,  and  social  media  information  from 
websites  such  as  Facebook  and  Twitter. 

Basic  email  and  email  with  file  attachments  are  the  simplest  exchanges  of 
information,  but  they  are  not  without  complications  which  should  be  solved  prior  to  a 
domestic  emergency.  Some  networks  require  messages,  or  attachments  originating 
from  those  networks,  to  be  encrypted.  This  may  render  the  messages  unusable  by 
recipients  off  the  domain.  Other  networks,  including  the  military,  block  certain  types  of 
attachments,  such  as  compressed  files  commonly  known  as  zip  files.  Files  of  this  type 
have  the  potential  to  mask  viruses  which  would  otherwise  escape  detection  until  set 
forth  to  damage  network  or  corrupt  data.  Simply  knowing  that  a  system  will  not  accept 
these  types  of  files  is  valuable;  helping  other  users  understand  alternate  methods  of 
transmission  are  required. 

RECOMMENDATION:  Points  of  coordination  between  agencies  should  include 
an  understanding  of  the  basic  capabilities  these  partners  will  employ  to  ensure 
compatibility  for  viewing  and  editing,  knowledge  of  bandwidth  limitations,  limitations  on 
file  sizes  user  mailboxes  are  permitted  to  send  or  receive,  and  directories  of  user 
names,  positions  or  responsibilities,  email  addresses  and  phone  numbers  for  use  during 
the  emergency  event.  Maintaining  email  and  phone  directories  with  frequent  updates  is 
also  important;  especially  as  personnel  change  duties.  Organizations  may  have  to  shift 
responsibilities  based  on  who  is  actually  available  to  participate  in  a  disaster  response. 
This  is  especially  true  for  responders  located  close  to  the  event,  as  some  people  may 
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be  personally  affected  by  the  disaster  and  unavailable  to  perform  their  normal  response 
duties. 

Web-based  file  sharing  portals,  such  as  Microsoft  SharePoint,44  allow  users  to 
seek  out  information  posted  in  a  pre-arranged  location,  instead  of  relying  on  the 
originator  to  send  out  the  information  attached  to  an  email.  SharePoint  allows  tiered 
access  ranging  from  unrestricted  public  access,  to  password  protected  internet  users,  to 
restrictions  allowing  only  intranet  or  domain  user  access.  Access  to  SharePoint 
websites  requires  prior  coordination  to  ensure  security  protocols  and  web  browser 
settings  are  compatible.  Even  more  training  is  required  for  SharePoint  users  to 
understand  where  and  how  information  is  stored,  and  what  privileges  they  have  on  the 
site  related  to  reading,  modifying,  posting  and  sharing  documents.  Users  may  also 
receive  email  notifications  when  new  or  updated  documents  are  posted. 

Incident  management  systems  typically  include  web-based  tools  to:  log  incident 
information;  track  requests  for  materials,  assistance  and  information;  and  provide 
electronic  chat  services  and  chat  logs  for  incident  managers.  The  systems  may  include 
useful  information  such  as  mission  tracking  numbers,  locations,  point  of  contact 
information,  and  specific  mission  requirements  and  approvals.  Access  to  this  data  is 
vital  for  military  agencies  partnering  with  emergency  managers  in  order  to  achieve 
situational  awareness  and  common  incident  understanding. 

ESI’s  WebEOC45  and  E  Team’s  NC446  are  examples  of  commercially  available 
incident  management  systems  in  use  by  many  federal,  state  and  local  agencies  as  well 
as  private  corporations.  Access  to  incident  management  systems  is  typically  password 
protected  and  may  require  training  on  specific  features  or  agency  standard  operating 
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procedures.  Some  of  the  information  contained  in  these  incident  management  systems 
can  be  displayed  graphically,  or  exported  to  other  mapping  systems  to  allow  users  to 
quickly  ascertain  the  status  of  information  linked  to  particular  locations. 

Although  not  intended  to  be  utilized  for  incident  management,  the  National  Guard 
Bureau  uses  the  Joint  Information  Exchange  Environment  (JIEE)  to  maintain  situational 
awareness  for  tracking  alerts,  missions,  and  assets  around  the  country.  JIEE  facilitates 
requests  for  information  and  assistance  among  state  National  Guards  and  National 
Guard  Bureau  and  provides  visibility  of  these  activities  to  NORTHCOM.47 

Geospatial  information  related  to  an  event  or  the  area  around  an  incident  site  that 
can  be  shared  among  different  partner  agencies  is  referred  to  as  a  Common  Operating 
Picture.  It  is  not  ‘common’  in  the  sense  that  each  user  sees  the  same  picture.  It  is, 
however,  common  in  that  each  user  determines  the  most  important  information  to  meet 
their  needs,  based  on  manipulation  of  layers  containing  identical  data.  Other  information 
can  then  be  hidden  so  as  not  to  obscure  or  clutter  their  map.  The  Federal  Emergency 
Management  Agency’s  (FEMA)  National  Emergency  Communications  Plan  (NECP) 
defines  Common  Operating  Picture  (COP)  as: 

“offering]  a  standard  overview  of  an  incident,  thereby  providing 
incident  information  that  enables  [all  involved]  to  make  effective, 
consistent,  and  timely  decisions.  Compiling  data  from  multiple  sources 
and  disseminating  the  collaborative  information  COP  ensures  that  all 
responding  entities  have  the  same  understanding  and  awareness  of 
incident  status  and  information  when  conducting  operations.”48 

Common  Operating  Pictures  are  frequently  found  on  today’s  digitized  battlefield 

with  military  systems  such  as  Blue  Force  Tracker,  Maneuver  Control  System,  and 

Movement  Tracking  System.  These  systems  depict  locations  of  units,  equipment  and 

supplies  on  maps  or  satellite  overlays.  The  concept  of  COP  is  also  gaining  popularity  in 
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emergency  management.  COP  information  is  displayed  graphically,  and  organized  into 
layers  by  subject.  Just  as  layers  of  acetate  and  symbols  can  be  placed  over 
conventional  paper  maps  to  display  items  of  interest,  electronic  mapping  layers  can  be 
turned  on  or  off  to  show  different  information  over  background  maps  or  imagery. 

The  COP  information  and  the  resulting  layers  are  managed  with  mapping 
software  such  as  ESRI’s  ArcGIS,49  favored  by  GIS  professionals,  and  Google  Earth,50 
which  is  readily  available  and  free.  WebEOC  and  JIEE  both  offer  the  option  to  represent 
information  contained  in  their  incident  management  systems  geospatially.  Users  can 
import  and  export  information  points  or  layers  in  standard  file  formats  common  to  GIS 
mapping  systems.51  Points  of  coordination  related  to  these  data  exchanges  include 
formats,  methods  and  locations  where  layer  files  will  be  exchanged,  and  intervals  that 
data  will  be  updated  to  ensure  that  the  latency,  or  delay  from  real  time,  is  known  to  all 
parties. 

The  development  and  use  of  Common  Operating  Pictures  took  on  an  entirely 
new  face  during  Haiti’s  earthquake  in  January  2010.  This  devastating  7.0  magnitude 
quake  killed  more  than  230,000  people.52  Nelson  and  Sigal  wrote: 

“The  relief  efforts  became  a  living  laboratory  for  new  applications 
such  as  SMS  (short  message  service)  texting,  interactive  on-line  maps, 
and  radio-cell  phone  hybrids.  These  tools  were  applied  to  urgent  tasks 
such  as  guiding  search-and-rescue  teams,  locating  missing  persons,  and 
delivering  food  and  water  to  the  populations  that  needed  them  the  most.”53 

Shortly  after  the  disaster,  the  Haitian  cellular  telephone  network  began  to  come 

back  on  line,  and  basic  text  messaging  (Short  Message  Service  or  SMS)  services  were 

re-established.  Humanitarian  organizations  worked  to  institute  as  SMS  short  code54  that 

enabled  cell  phone  users  to  communicate  with  aid  workers.  “Reports  about  trapped 
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persons,  medical  emergencies  and  specific  needs  such  as  food,  water  and  shelter  were 
received  and  geo-tagged  on  maps  updated  in  real  time  by  an  international  group  of 
volunteers.”55  Within  days,  thousands  of  messages  were  coming  through  the  system.”56 

Creole  speakers  from  around  the  world  volunteered  to  translate  the  text 
messages  and  provide  them  back  to  rescue  workers.  Another  group  of  volunteers  at 
Tufts  University  in  Boston  began  using  the  crisis  mapping  program  Ushahidi,57  originally 
developed  to  map  political  violence  in  Kenya,  to  publish  locations  where  people  were 
trapped  and  to  depict  where  aid  was  available.  A  third  volunteer  group  from  the  Georgia 
Institute  of  Technology  converted  Ushahidi  data  to  KML  for  use  with  Google  Earth.  This 
allowed  responders  with  bandwidth  restrictions,  in  this  case  the  U.S.  Marines,  to  better 
receive  the  data.58 

The  Ushahidi  platform  was  used  for  similar  purposes  after  a  6.3  magnitude 
earthquake  struck  Christchurch,  New  Zealand  in  February  201 1 .  It  allowed  users  to 
track  the  availability  of  medical  and  humanitarian  aid,  government  notices,  building 
inspections,  and  utility  restoration  efforts  in  different  areas  of  the  city.59 

The  Ushahidi  maps  for  Haiti  and  Christchurch  also  included  information  gathered 
from  the  social  media  sites  Facebook  and  Twitter.60  On-line  volunteers  around  the  world 
turned  social  media  reports  into  posts  located  on  the  Ushahidi  map.  A  process  to  filter 
information,  eliminate  duplicate  items  and  verify  facts  was  used  to  lend  validity  to  the 
information.61 

Social  media  is  newly  recognized  as  a  source  of  intelligence  for  responding 
authorities.  FEMA  Administrator  Craig  Fugate,  in  an  address  to  a  Senate  Sub¬ 
committee,  said, 
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“...individuals,  families  and  communities  are  our  nation's  ‘first'  first 
responders.  The  sooner  we  are  able  to  ascertain  the  on-the-ground  reality 
of  a  situation,  the  better  we  will  be  able  to  coordinate  our  response  effort 
in  support  of  our  citizens  and  first  responders.  Through  the  use  of  social 
media,  we  can  disseminate  important  information  to  individuals  and 
communities,  while  also  receiving  essential  real-time  updates  from  those 
with  first-hand  awareness.”62 

Twitter  is  especially  valuable  as  it  allows  a  user  to  search  for  and  follow 
information,  not  just  individuals.  While  any  single  user’s  eyewitness  account  of  an 
incident  or  event  may  not  be  credible,  the  technique  of  “crowdsourcing”63  allows 
analysis  of  multiple  reports  of  the  same  event,  increasing  the  credibility  of  the 
information. 

The  United  States  Southern  Command  (SOUTHCOM)  uses  social  media  to 
“provide  greater  situational  awareness  to  facili[ta]te  faster  responses.”64  Employing  a 
Twitter  search  dashboard  called  TweetGrid,65  their  Operations  Center  learned  of  the 
Haiti  earthquake  while  the  ground  was  still  shaking,  well  before  news  organizations 
reported  it. 

Social  media  also  can  allow  emergency  managers  and  their  public  information 
officers  easy  avenues  to  communicate  pertinent  information  to  the  public  without  having 
to  wait  for  the  traditional  print  or  broadcast  media  news  cycle.  Immediately  after  the 
Christchurch  earthquake,  for  example,  Twitter  was  used  to  direct  people  to  areas  of 
shelter,  fresh  water  and  clothing  distribution  points,  and  to  relay  information  about  the 
restoration  of  utilities. 

By  canvassing  partner  agencies  and  the  public  to  determine  the  most  appropriate 
and  necessary  information,  and  by  quickly  making  that  information  available  directly  to 
the  people  affected  by  the  disaster;  the  task  of  caring  for  the  victims  can  become  easier. 
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NIMS  calls  for  the  establishment  of  a  Joint  Information  Center  (J  1C)  and  for  public 
information  to  “be  coordinated  and  integrated  across  jurisdictions  and  across 
jurisdictions,  agencies,  and  organizations;  among  Federal,  State,  tribal,  and  local 
governments;  and  with  NGOs  and  the  private  sector.”66  In  many  cases,  the  public  affairs 
capabilities  the  military  brings  to  a  disaster  will  greatly  assist  the  JIC  mission. 

Disaster  response  information  can  take  many  forms.  Although  programs  and 
platforms  will  continue  to  change,  and  innovations  will  continue  to  advance,  planners 
must  remain  flexible  in  their  approaches  and  keep  in  mind  that  coordination  is  key  to 
their  ability  to  partner  with  other  agencies.67 

When  and  Where.  When  and  where  will  the  information  be  needed?  Most 
information  exchanges  occur  via  the  Internet;  beginning  in  some  cases  even  before  a 
domestic  emergency  event  occurs.  RECOMMENDATION:  Regular  and  routine  access 
to  systems  and  password  protected  accounts  must  be  maintained  as  part  of  steady 
state  operations  to  ensure  availability  whenever  required. 

Access  to  information  related  to  emergencies  may  be  required  from  the  highest 
levels  of  government  to  responders  on-site  and  to  the  public.  Many  important  decisions 
related  to  resourcing  and  supplying  disaster  areas  are  made  in  operations  centers  that 
are  located  a  great  distance  from  the  incident  site  or  affected  area,  though.  Decision 
makers  at  a  distance  are  relying  only  on  information  gained  from  those  present  at  the 
incident  site  as  a  basis  for  their  judgments. 

It  is  important  for  the  most  credible,  clear,  concise,  and  correct  information  to  be 
made  available  to  these  parties  so  they  may  maintain  situational  awareness  and  make 
timely,  quality  decisions.  It  is  also  important  that  easily  attainable,  appropriate 
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information  be  available  to  the  pre-staged  or  on-site  response  partners  who  may  face 
challenges  due  to  disaster  related  service  interruptions,  overloads  in  internet  and 
cellular  phone  services,  or  have  equipment  with  limited  connectivity. 

Although  the  use  of  cellular  services  ultimately  proved  resilient  in  Haiti,  many  cell 
towers  were  destroyed  when  the  buildings  that  supported  the  towers  collapsed.  In  other 
cases,  system  components  were  shaken  out  of  alignment  and  required  attention  from 
technicians  before  they  could  be  put  back  into  operation.68  Because  of  the  limited 
availability  of  the  system,  and  the  lower  quality  of  service  requirements  for  data  as 
compared  to  voice  traffic,  the  SMS  text  messaging  employed  was  very  successful  for 
communications  in  the  affected  area.69 

Data  takes  on  many  different  forms  for  many  different  users,  but  it  is  undisputed 
that  appropriate  data  reach  the  response  partners.  It  also  holds  true  that  timely  data  is 
required  throughout  the  entire  cycle  of  an  event. 

How.  How  will  the  information  be  coordinated,  transmitted,  received  and  used, 
and  how  will  the  integrity  and  security  of  the  information  be  maintained? 
RECCOMENDATION:  The  military  and  other  agencies  likely  to  respond  to  disasters 
must  build  relationships  at  all  levels  to  ensure  they  are  ready  to  work  together  when 
called. 

At  the  federal  level,  the  201 0  Quadrennial  Defense  Review  calls  for  the 
improvements  in  DSCA  support  and  states,  “the  Department  of  Defense  will  closely 
cooperate  with  other  U.S.  departments  and  agencies  to  better  protect  and  advance 
America’s  interests.”70  To  this  end,  DOD  and  DHS  are  in  the  process  of  implementing  a 
Strategic  Operations  Information  Sharing  Plan,71  and  Secretary  of  Defense  has 
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convened  a  Defense  Science  Board  Task  Force  on  Achieving  Interoperability  in  a  Net- 
Centric  Environment.  Their  product  dives  deeply  into  technical  issues  focused  mainly  on 
DOD  interoperability,  but  also  considered  DHS  interoperability  during  domestic 
emergency  response.72  While  this  level  of  interagency  cooperation  calls  for  formal 
agreements,  governance,  testing,  and  accreditation;  smaller  scale  information  sharing 
relationships  must  also  be  considered. 

It  is  essential  that  state,  tribal,  county  and  local  level  entities  strengthen  their 
abilities  to  work  together,  and  with  private  and  public  entities  at  their  levels.  The 
National  Fire  Protection  Association  (NFPA),  an  internationally  recognized  code  making 
body  recognized  as  an  authority  for  reduction  of  the  burden  of  fire  and  other  hazards, 
created  Code  1600,  the  Standard  on  Disaster/Emergency  Management  and  Business 
Continuity  Programs.  It  advocates  coordination  and  advisory  committees  as  well  as 
training  and  exercises  to  prepare  for  the  implementation  of  disaster  plans.73  Similarly, 
recommendations  resulting  from  the  2010  Haiti  earthquake  include  “engaging]  in 
preparation  and  simulation  exercises... for  future  emergency  responses... to  identify 
models  for  how  formal  institutions  and  self-organized  efforts  on  the  ground  interact 
during  humanitarian  response.”74 

One  important  aspect  associated  with  information  sharing  for  the  myriad  of 
disaster  response  partners  is  establishing  mechanisms  to  trust  other  users  in  order  to 
ensure  information  integrity.  In  this  context,  a  trusted  entity  is  one  that  provides  some 
assurance  that  the  sender  or  receiver  of  information  is  actually  who  they  claim  to  be, 
based  on  their  user  name  or  account  name.  Untrusted  entities  may  not  necessarily  be 
who  they  claim  to  be  when  there  is  no  mechanism  provided  for  verification. 
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DOD  user  trust  is  based  on  a  non-repudiation  mechanism  provided  by  a  unique 
and  private  key  held  by  each  user’s  common  access  card  and  a  personal  identification 
number  that  is  required  to  use  the  card.  This  assures  senders,  for  example,  that  email 
actually  came  from  the  named  user’s  account.  Other  users  with  government  or 
corporate  domains  may  have  assurances  built  into  their  processes  that  make  it  likely 
that  a  user  is  actually  who  they  claim  to  be.  Public  email  services,  however,  such  as  G- 
mail  or  Hotmail,75  offer  no  such  means  to  validate  user  names. 

Information  flow  can  certainly  be  maintained  to  and  from  untrusted  users,  but 
trusted  users  may  benefit  from  access  to  additional  information,  such  as  CUI  or 
otherwise  sensitive  information  that  is  restricted  to  others.  Guidance  for  information 
classifications,  handling  and  access  should  be  another  point  of  coordination  among 
partners. 

During  their  response  to  the  Haiti  earthquake,  SOUTHCOM  established  a 
Community  of  Interest  (COI)  on  the  All  Partners  Access  Network  (APAN).  APAN  is  a  file 
sharing  portal  created  to  provide  “effective  information  exchange  and  collaboration 
between  [DOD]  and  any  external  country,  organization,  agency  or  individual  that  does 
not  have  ready  access  to  traditional  DOD  systems  and  networks.”76  Another  such 
endeavor  by  the  DOD’s  Joint  Knowledge  Online  (JKO),  is  HARMON  I  EWeb.  It  provides 
an  environment  to  “forge  trusted  working  relationships  between  government  and  non¬ 
government  organizations  in  a  trusted  environment. ...while  keeping  out  those  whose 
interests  are  not  so  noble.”77  Both  sites  employ  techniques  to  validate  users  or  domains 
in  order  to  limit  access  to  untrusted  entities. 
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DHS  has  established  similar  capabilities  in  the  Homeland  Security  Information 
Network  (HSIN).  It  “is  a  national  secure  and  trusted  web-based  portal  for  information 
sharing  and  collaboration  between  federal,  state,  local,  tribal,  territorial,  private  sector, 
and  international  partners  engaged  in  the  homeland  security  mission.”78 

Each  site  offers  a  slightly  different  collection  of  tools  for  communicating  and 
sharing  information  related  to  disaster  management.  Some  individual  states  have  also 
undertaken  efforts  to  provide  information  sharing  platforms  for  partner  agencies.79 
RECOMMENDATION:  Arrangements  to  ensure  the  most  likely  partners  or  domains  are 
appropriately  credentialed  should  be  included  in  early  coordination  efforts. 

Other  coordination  points  for  local  and  regional  partners  include  email 
communications  and  file  sharing  portal  access,  regular  directory  maintenance, 
understandings  of  file  types  and  sizes  to  be  exchanged,  and  estimations  of  bandwidth 
capacities  that  users  expect  to  have  available.  They  may  also  include  password 
protected  access  to  Incident  Management  Systems,  and  guidelines  for  monitoring  or 
using  the  information  contained  on  those  systems.  RECOMMENDATION:  These  points 
should  be  written  into  EMAC  agreements  or  memorandums  of  understanding  between 
partner  agencies. 

Similar  points  also  accompany  layer  sharing  for  common  operating  pictures. 
DOD’s  APAN,  the  National  Guard’s  Geospatial  Information  Center  (GIC),80  and  a  DHS 
product  called  Virtual  USA81  provide  common  interface  points  for  such  layer  exchange. 
Other,  similar  endeavors  include  NORTHCOM’s  Situational  Awareness  Geospatial 
Enterprise  (SAGE)82  and  DHS’s  Integrated  Common  Analytical  Viewer  (iCAV)  and  DHS 
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Earth,  providing  access  to  many  critical  infrastructure  and  homeland  security  related 
data  layers.83 

Responders  close  to  disaster  areas  may  count  on  cell  phone  networks  as  their 
primary  mode  of  voice  and  data  communications.  Even  though  networks  make  efforts  to 
harden  their  systems  and  provide  redundancy,  network  availability  may  not  be  a  realistic 
expectation  immediately  after  the  disaster.  In  some  cases,  cellular  companies  may  bring 
in  portable  cellular  assets  to  supplement  or  replace  damaged  parts  of  their  system,84 
leaving  those  voice  and  data  services  degraded  in  the  hours  immediately  after  the 
incident.  Coordination  with  these  service  providers  may  aid  in  infrastructure  restoration 
that  is  critical  to  responders. 

Responding  agencies  and  their  counterparts  should  understand  how 
communications  degradation  may  affect  them  in  the  first  hours  after  a  disaster. 
Coordination  with  other  partners  to  share  satellite  access  may  be  very  valuable. 

Because  of  the  possibility  of  limited  availability  of  cell  networks,  SMS  text  messaging  in 
lieu  of  voice  operations  also  proves  viable.  SMS  allows  for  data  to  be  automatically 
resent  if  the  first  transmission  is  unsuccessful.  Cellular  systems  also  have  the  capability, 
if  configured  appropriately,  to  accommodate  bulk  message  broadcasts  in  a  manner  that 
minimizes  the  impact  to  the  cellular  network.85  Knowing  which  agencies  and  numbers 
are  equipped  to  receive  SMS  text  messages  is  certainly  a  valuable  planning  point  as 
well. 

Incorporating  social  media  before  disaster  strikes  involves  establishing  accounts 
and  gaining  and  maintaining  a  following  of  partner  agencies  and  users  by  establishing  a 
presence  on  the  services  and  providing  useful  information  on  a  regular  basis.  This  could 
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include  reposting  or  retweeting  useful  information  from  partner  agencies  and  ensuring 
that  local  news  media  follow  and  repost  pertinent  information.86  During  a  disaster,  early 
monitoring  of  social  media  messages  and  establishment  of  simple  keywords  (called 
hashtags)87  is  vital  to  gain  new  followers  and  increase  the  span  of  coverage.  Twitter 
even  offers  a  feature  for  users  to  monitor  trends  in  hashtags  so  popular  topics  can 
easily  be  identified. 

Trusted  user  status  is  very  difficult  on  social  media  such  as  Twitter.  The  site  has 
had  a  process  in  place  to  verify  or  trust  users  claiming  to  be  celebrities.  It  may  be 
possible,  in  the  future,  for  public  officials  and  disaster  response  agencies  to  petition  for 
similar  status.  In  the  meantime,  Twitter  recommends  users  link  to  a  twitter  identity  from 
an  official  website.88 

Putting  trust  in  individual  social  media  users  is  even  more  difficult  for  emergency 
managers  and  partner  agencies,  and  manually  evaluating  this  data  can  be  very  time 
consuming.  The  creators  of  Ushahidi  have  developed  a  free,  open-source  product 
called  Swiftriver  to  sort  and  filter  data  and  impart  a  degree  of  trust  and  verification  into 
crowdsource  data.  It  was  “born  out  of  the  need  to  understand  and  act  upon  a  wave  of 
massive  amounts  of  crisis  data  that  tends  to  overwhelm  in  the  first  24  hours  of  a 
disaster.”89  “The  software... is  based  on  the  idea  that  by  comparing  messages  and 
information  from  a  variety  of  sources  about  an  event,  the  system  can  build  an 
understanding  of  which  are  credible  and  which  are  not.”90 

RECOMMENDATION:  Any  of  the  tools  described  should  be  explored  before 
disaster  strikes  to  build  operator  proficiencies  before  they  are  required.  The  operational 
tempo  after  an  event  is  sometimes  too  high  to  allow  for  the  associated  learning  curve. 
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Summary 

Early  establishment  of  partner  relationships  and  periodic  contact  to  maintain 
coordination  is  vital  to  successful  working  relationships  and  information  sharing 
mechanisms.  Domestic  operations  partners,  including  military  elements,  must  be 
cognizant  of  the  fact  that  it  is  impossible  to  imagine  every  partner  agency  to  be  involved 
before  the  disaster  strikes.  Planning  and  training  on  new  partner  coordination  may  make 
these  actions  easier  after  disaster  has  struck. 

The  need  for  information  sharing  among  domestic  operations  partners  is 
apparent,  and  the  requirements  seem  to  be  growing  almost  as  fast  as  solutions  are 
developed  or  adapted.  It  is  essential  for  planners  to  focus  on  interoperability  and 
flexibility,  steering  away  from  proprietary  systems  and  other  limiting  factors  that  may 
preclude  adaption  as  technology  changes.  This  will  better  facilitate  interoperability  with 
other  response  partners. 

Certainly,  pre-established  relationships  and  mechanisms  for  information  sharing 
must  be  established  prior  to  disasters  in  order  to  save  valuable  time  in  the  crucial  hours 
immediately  after  disaster  strikes.  DOD  must  proactively  engage  their  most  likely 
response  partners  to  build  relationships  and  begin  coordination  efforts.  These 
relationships  should  be  periodically  revisited,  and  key  points  of  coordination  periodically 
reviewed  and  maintained  to  ensure  that  the  DOD  homeland  defense  and  disaster  relief 
responders  are  prepared  and  equipped  to  aid  in  a  fully  coordinated  response  by 
exchanging  appropriate  information  in  a  timely  manner  with  DOD  partner  organizations. 
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